$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa File: cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa (raw, json) Hash identifier: nTVFbKSdQM4qnfbVvmCA/IKc3y767y5CUeZJmKrQLQc= Subject key identifier: 4A:29:F3:D6:FE:88:B2:66:E5:4E:F5:26:8E:38:A3:C3:B0:61:F0:A2 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B7DECB9334CE703A5A6986B40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 36183 IP address blocks: 172.225.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:b9:33:4c:e7:03:a5:a6:98:6b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=eb230e49-cdf7-4040-a90b-a9d521f6ff87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:61:8e:9e:d9:8b:01:e6:cc:23:de:17:3f:0c: a7:c5:1f:4b:da:7c:49:3e:c7:10:1c:5b:c8:0b:c4: 84:85:83:16:a8:fc:ac:3a:41:e5:a9:a9:a6:e4:a7: 7b:0c:ff:35:59:73:4d:e0:4a:0a:41:b9:b7:76:5a: 20:ad:25:5d:3c:a5:ee:d1:74:5d:26:eb:aa:ca:53: c7:75:4f:d0:3f:ef:8d:a7:25:15:9c:12:f4:ac:a7: 46:79:66:8d:fa:8d:32:28:a0:7e:65:1c:6c:82:2d: 66:c3:ca:9c:59:4d:8c:49:87:70:e8:90:b6:a4:90: 3a:62:ab:be:ad:88:13:cd:4f:3d:11:31:0f:25:c3: 57:35:67:62:47:ea:d4:d0:6f:6d:8d:0a:d0:a1:ac: 98:ed:81:9c:fe:23:ab:0d:f7:e7:a4:b2:90:17:6d: 4c:2a:53:21:37:bf:f9:1e:9c:d7:1f:2c:4a:bf:58: 02:e2:8d:50:2f:21:51:92:3c:7f:59:c8:96:33:34: f1:e1:a6:2a:cf:19:f8:1b:d4:aa:a4:13:6f:b5:81: 1c:10:22:d9:35:0a:0c:32:11:e5:fd:d4:28:1b:c3: c9:ae:9e:3f:de:e0:46:45:42:76:1b:a7:47:ee:a2: 7b:39:b2:ac:60:3d:eb:6a:f1:d6:83:c9:5d:c3:57: 7d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:29:F3:D6:FE:88:B2:66:E5:4E:F5:26:8E:38:A3:C3:B0:61:F0:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cd5f341e-4f5a-35c3-aa95-9862b533c4a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 172.225.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4a:d8:e6:72:fe:23:61:cb:c8:fa:61:84:00:6e:2a:fb:7f: 10:d1:98:f8:c5:2f:d6:c6:25:05:4b:9e:35:c0:5e:97:a1:38: 25:22:a2:aa:2c:2e:0c:59:80:74:52:ed:3f:19:5a:a2:a9:77: 7c:ae:55:79:62:b7:05:13:05:75:f8:35:39:46:ab:7c:21:69: 43:5b:12:59:66:74:a9:45:0a:a7:b6:ca:f7:f1:32:60:7c:8c: 3c:5b:3d:5d:85:27:de:7a:8f:11:2d:13:8b:82:af:1b:0e:9b: 48:3f:4c:13:16:7b:54:14:73:ab:45:b8:30:57:05:2e:4b:8c: bb:08:ca:d3:a5:d3:b0:64:e9:39:98:8a:fe:ac:a3:22:8c:aa: 77:51:6d:9f:62:46:6b:f3:10:9c:7d:ef:ce:2d:70:2e:5c:0c: 22:cc:53:73:0d:c7:e5:79:b5:cc:4f:a9:3e:16:5a:10:c7:aa: cb:8e:a9:6c:6b:88:82:86:c0:63:0c:d3:7a:0f:04:da:93:f0: d8:41:66:60:8b:3d:f5:39:53:2f:69:5b:58:bf:28:33:3d:3f: 2c:9a:32:7a:53:45:ab:b9:9f:2f:43:13:bf:4a:73:97:0a:ba: fa:d0:f7:12:bd:10:08:66:22:94:68:18:ac:42:4e:1a:b6:ef: e7:af:36:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97LkzTOcDpaaYa0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk ZWIyMzBlNDktY2RmNy00MDQwLWE5MGItYTlkNTIxZjZmZjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WGOntmLAebMI94XPwynxR9L2nxJPscQHFvI C8SEhYMWqPysOkHlqamm5Kd7DP81WXNN4EoKQbm3dlogrSVdPKXu0XRdJuuqylPH dU/QP++NpyUVnBL0rKdGeWaN+o0yKKB+ZRxsgi1mw8qcWU2MSYdw6JC2pJA6Yqu+ rYgTzU89ETEPJcNXNWdiR+rU0G9tjQrQoayY7YGc/iOrDffnpLKQF21MKlMhN7/5 HpzXHyxKv1gC4o1QLyFRkjx/WciWMzTx4aYqzxn4G9SqpBNvtYEcECLZNQoMMhHl /dQoG8PJrp4/3uBGRUJ2G6dH7qJ7ObKsYD3ravHWg8ldw1d9bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEop89b+iLJm5U71Jo44o8OwYfCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvY2Q1ZjM0MWUtNGY1YS0z NWMzLWFhOTUtOTg2MmI1MzNjNGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArOGfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFK2OZy/iNhy8j6YYQAbir7fxDRmPjFL9bGJQVLnjXAXpehOCUioqos LgxZgHRS7T8ZWqKpd3yuVXlitwUTBXX4NTlGq3whaUNbEllmdKlFCqe2yvfxMmB8 jDxbPV2FJ956jxEtE4uCrxsOm0g/TBMWe1QUc6tFuDBXBS5LjLsIytOl07Bk6TmY iv6soyKMqndRbZ9iRmvzEJx9784tcC5cDCLMU3MNx+V5tcxPqT4WWhDHqsuOqWxr iIKGwGMM03oPBNqT8NhBZmCLPfU5Uy9pW1i/KDM9PyyaMnpTRau5ny9DE79Kc5cK uvrQ9xK9EAhmIpRoGKxCThq27+evNug= -----END CERTIFICATE-----Generated at Mon Oct 20 12:41:20 2025 by rpki-client